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1, 2 (canceled). 

3. (currently amended) The method of Claim 17, wherein the combination is a hash function 
of a concatenation of the channel key K c and session key K,. 

4-6 (canceled). 

7. (currently amended) The method of Claim [[61] 17 t wherein at least one of the providing acts is 
undertaken in a point-to-point communication. 

8. (currently amended) The method of Claim [frj|] 17 4 wherein at least one of the providing acts is 
undertaken as part of a broadcast. 

9-11 (canceled). 



12. (currently amended) The method of Claim 1[[0]]7, comprising selectively updating the 
session key block. 

13. (original) The method of Claim 12, comprising updating the session key block by encrypting 
an updated session key with at least the encryption scheme B R 8t . 

14. (canceled). 
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15. (currently amended) 



The method of Claim 1 1 [4]]7, wherein the new channel key K c ' is sent 



in a message that is split. 



16. (currently amended) 



The method of Claim UI.4JJ7, wherein the new channel key is 



refreshed using plural messages. 



17. (currently amended) The m e thod of Claim 14, A computer-implemented method for 



securely transmitting multicast data, comprising: 

encrypting at least one tide T with at least tide key K^; and 

encrypting the__titIe_ke.y_K^ with at least one channel-unique key K ni using at least one 
encryption function S to render a multicast data charmel encrypted as S K fU (K T ). S y r fD. wherein the 
channel-unique key KL. is the result of a combination of a channel key KL and a session key K r 
wherein the session key K« is encrypted with at least a first encryption scheme B R T l to render a session 
key block, further comprising providing at least one player with device kevs K, to activate die player 
and providing the player with the channel key Ey and the session key block wherein the player can 
determine the session key K. from the session key block using the device keys further comprising 
periodically refreshing the channel key KL to enforce subscriptions, wherein a new channel key K/ 
is encrypted with at least_a_second encryption scheme B\ and wherein the encryption scheme B\ 
includes: 

assigning each player in a group of players respective private information l^; 



1053- 130 AMI 



PAGE 3(9 * RCVD AT 3131/2008 7:51 :38 PM [Eastern Daylight Time] ' SMPTO-EFXTO ' DNIS:2738300 1 CSID:16193388078 ' DURATION (mm-ss):01-16 



FROM ROGITZ 619 338 8078 



(MON)MAR 31 2008 1 5 : 47/ST. 1 5 : 46/No. 6833031 066 P 4 



CASE NO.: ARCStfOOlOOJWUSI 
Serial No.: 10/042,652 



PATENT 
Filed: January 8, 2002 



March 31, 2008 
Page 4 

partitioning players not in a revoked set R into disjoint subsets S^.-.S^ having associated 
subset keys L^..!^; and 

encrypting the session key K s with the subset keys 1^...,!^ to render m encrypted versions 
of the session key 

18. (original) The method of Claim 17, wherein the encryption scheme B% further includes 
partitioning the players into groups S,,...,S W , wherein V is an integer, and the groups establish 
subtrees in a tree. 

19. (original) The method of Claim 18, wherein the tree includes a root and plural nodes, each node 
having at least one associated label, and wherein each subset includes all leaves in a subtree rooted at some 
node v ; that are not in the subtree rooted at some other node v^ that descends from v it 

20. (original) Hie method of Claim 19, wherein the revoked set R defines a spanning tree, and 
wherein the method includes: 

initializing a cover tree T as the spanning tree; 

iteratively removing nodes from the cover tree T and adding nodes to a cover until the cover 
tree T has at most one node. 
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21. (original) The method of Claim 19, wherein each node has at least one label possibly induced 
by at least one of its ancestors, and wherein each player is assigned labels from all nodes hanging from a 
direct path between the player and the root but not from nodes in the direct path. 

22. (original) The method of Claim 21, wherein labels are assigned to subsets using a pseudorandom 
sequence generator, and the act of decrypting includes evaluating the pseudorandom sequence generator. 

23-40 (canceled). 

41. (currently amended) A computeHmplemented player for decrypting streamed content, 
comprising: 

at least one device key K^; wherein the nlaver moo no for decryptsmg a session key K, using 
the device key K^; wherein the player also moona for decryptsmg- a channel unique key using at 
least the session key K 8 ; m4 the nlaver further m e ans for deriving a title key K T using at least the 
channel unique key the tide key K T being useful for decrypting content 

42. (original) The player of Claim 41, wherein die content is multicast to the player. 

43. (currently amended) The player of Claim 42, wherein the player itioludofl means for 
receivesiag streamed content, and the content is streamed to the player. 

44. (currently amended) A computer program device, comprising: 

I0&-13OAM] 
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a computer program storage device including a program of instructions usable by a computer 
to undertake logic comprising: 

logic means for receiving private information I u upon registration with a content provider; 

logic means for subscribing to at least one content channel provided by the content provider; 

logic means for receiving at least one encrypted channel key K c at least partially in response 
to subscribing to the channel; 

logic montiQ for deriving the channel key K^. using the information l u ; and 

logic moanofor using at least the channel key K c to decrypt content streamed over the channel. 

45. (currently amended) The computer program device of Claim 44, the logic further 



plural d e vic e k e ys 

logic m e ans for receiving at least one session key block; 

logic means for deriving at least one session key K, from the session key block using at least 
one of plural device keys K d . 



logic means for using the session key K s and channel key to derive a channel unique key 



comprising: 



46. (currently amended) 



The computer program device of Claim 45, the logic further 



comprising: 



K^; and 
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logic moons for using (lie channel unique key to decrypt a title key K T useful for 
decrypting the content 



47, 48 (canceled). 
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